QEMU Buffer Overflow Vulnerability (CNVD-2020-35975)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/pci/pci.c file in QEMU version 4.2.0. The vulnerability stems from a network...

Quick Player 1.3 Denial Of Service

Exploit Title: Quick Player 1.3 - 'Browser.exe' Denial of Service Date: 06/05/2020 Author: Felipe Winsnes Software Link: http://download.cnet.com/Quick-Player/3640-21684-10871418.html Version: 1.3 Tested on: Windows 7 Proof of Concept: 1.- Run the python script "poc.py", it will create a new file...

CVE-2020-13837

An issue was discovered on Samsung mobile devices with Q10.0 software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 June 2020...

CVE-2020-13837

An issue was discovered on Samsung mobile devices with Q10.0 software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 June 2020...

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

CVE-2020-13837

CVE-2020-13837 concerns Samsung mobile devices running Q(10.0). The issue is that the Lockscreen does not block access to Music Share via the Quick Panel, allowing potential exposure of Music Share controls or data when the device is locked. The Samsung Internal ID is SVE-2020-17145 (June 2020). ...

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

QEMU Buffer Overflow Vulnerability (CNVD-2020-34134)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in QEMU. The vulnerability originates when a networked system or product performs an...

QEMU Pauth Protection Bypass Vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in QEMU version 4.0.0. A local attacker can exploit the vulnerability to bypass Pauth...

CVE-2020-12685

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript...

Quick Start Guide: ZTD via the LTE Interface (Citrix SD-WAN 110-LTE-SE)

This document depicts a Quick Start Guide for Citrix SD-WAN 110-LTE-SE appliances when performing ZTD Zero Touch Deployment via the LTE Interface...

The vulnerability of the ip_reass function in the QEMU hardware infrastructure, which allows a perpetrator to trigger a service failure.

The vulnerability of the ipreass function in ipinput.c in the QEMU hardware infrastructure is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Cannot edit configuration of VMware VM via ESXi after Instant Recovery from Veeam Agent backup

Challenge When you complete Instant VM Recovery from the Veeam Agent backup, then try to edit the VM configuration via ESXi, the following error occurs: "Enter a disk size which is larger than its original capacity." Then you try to edit the decimal virtual disk size via ESXi, and another error...

The vulnerability of the “quick import-export-marks” option in the distributed Git version control system allows a attacker to trigger a service failure and compromise data integrity.

The vulnerability of the “quick import-export-marks” option in the distributed Git version control system is related to a lack of input validation mechanisms. Exploiting this vulnerability allows attackers to trigger service failures and compromise data integrity...

DLL Hijacking Vulnerability in Quick Play Game Box of Shenzhen Yunqi Network Technology Co.

Quick Play Game Box is a game box software. Shenzhen Yunqi Network Technology Co., Ltd Quick Play Game Box has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

February 10, 2015 update for PowerPoint Viewer 2010 (KB2880522)

February 10, 2015 update for PowerPoint Viewer 2010 KB2880522 This article describes update KB2880522 for Microsoft PowerPoint Viewer 2010 that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes an issue in which the Align Selected Objects andAlign to...

CVE-2018-21039

An issue was discovered on Samsung mobile devices with N7.0 software. With the Location permission for the compass feature in Quick Tools aka QuickTools, an attacker can bypass the lockscreen. The Samsung ID is SVE-2018-12053 December 2018...

Security feature bypass

An issue was discovered on Samsung mobile devices with N7.0 software. With the Location permission for the compass feature in Quick Tools aka QuickTools, an attacker can bypass the lockscreen. The Samsung ID is SVE-2018-12053 December 2018...